6816f2d13e17781513a03b90ccdbbaae_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6816f2d13e17781513a03b90ccdbbaae_JaffaCakes118
Size

223KB
MD5

6816f2d13e17781513a03b90ccdbbaae
SHA1

8d69be5849849fe589b4ed08647d93d4e61ddcbb
SHA256

84cfc254e195aa351fd700b0d9ee961decf2b89a040f7a2e609def7a13f7e2d5
SHA512

d30f680a700b2926a2e431c2e7abadcf4d801f0d10667c27b04f3d244f578242f4191847395fd46bd59e0acee70f1f2b302e0581cce247a8542e4ccbdd23f36c
SSDEEP

6144:XAJFK2QdxAb1gX7iHFEZefYhi06eeztYCO:XATNQd6mSFUThinztP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6816f2d13e17781513a03b90ccdbbaae_JaffaCakes118

Files

6816f2d13e17781513a03b90ccdbbaae_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bf020afffb0169705d5c7726e8345b67

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OutputDebugStringA
GetProcAddress
GetModuleHandleA
ExitProcess
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
WideCharToMultiByte
GetLastError
SetLastError
GetCurrentThreadId
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
HeapAlloc
GetACP
GetOEMCP
GetCPInfo
InitializeCriticalSection
VirtualAlloc
HeapReAlloc
RtlUnwind
InterlockedExchange
VirtualQuery
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
VirtualProtect
GetSystemInfo

mscoree

_CorExeMain

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 194KB - Virtual size: 194KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ